Overview

overview

10

Static

static

10

1528-64-0x...ry.exe

windows7-x64

1528-64-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1528-64-0x0000000000400000-0x000000000043C000-memory.dmp

  • Size

    240KB

  • MD5

    7fe65a26bcf75bf57830c03921aab864

  • SHA1

    0bafd17e177f185d1875bf856ac7df7bac534002

  • SHA256

    2ce50e5fcd54efc6866c21a52aa2f200414ccb5c45432b0cf53395e30798fe46

  • SHA512

    f081e205bdc66218c29aed438e1782ddb5da7f131289858318ff6e89df39908795d94a6b04b625b179734271d1e83a06a605bf7941bb4df44ce2cc0ac76cb36a

  • SSDEEP

    6144:kOPTCn87DGtUrr5o4msRx2RsnCNerJIp:dEuDjisnYNp

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.mgcpakistan.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    boygirl123456

Signatures

Files

  • 1528-64-0x0000000000400000-0x000000000043C000-memory.dmp
    .exe windows x86


    Headers

    Sections